Re: RADIUS 2.0 with computone (fwd)

Josh Wilmes (josh@sky.net)
Thu, 23 Jan 1997 16:35:02 -0600

> >Thu Jan 23 12:42:41 1997: [25687] accounting: client ts-7.sky.net sent accou
nting-request with invalid request authenticator
> >Thu Jan 23 12:42:41 1997: [25687] Sending Accounting-Response for id 11 to t
s-7 (198.70.175.70)
>
> Looks like the Computone isn't signing its packets.
>
> You're not seeing this on your Livingston's, right?

Well, I havent tested our 2.0 server with the livingstons yet. I'm beta
testing 2.0 on our computone pool.

> >I set the RADIUS CHAP secret and the accounting CHAP secret the same- is thi
s
> >correct?
>
> There is no such thing as RADIUS CHAP or Accounting CHAP - do you mean the
> RADIUS secret?

You'd have to take that up with computone =)
ts-7# radius show
RADIUS/Accounting Configuration:

RADIUS Server Host #1 : 198.70.175.16
RADIUS Server Host #2 : [198.70.175.2
RADIUS Accounting Host #1 : 198.70.175.16
RADIUS Accounting Host #2 : [198.70.175.2
RADIUS CHAP Secret :
*snip*
RADIUS Accounting CHAP Secret:
*snip*

In any case, should the two secrets be the same?

> >And, although I am sure this is a FAQ, could someone explain what the
> >"dropping duplicate" errors mean exactly?
>
> The server has already seen that request, so it doesn't bother processing it
> again. It'll just resend what it said last time.

Thats what I thought, however, I think that the computone is re-sending the
accounting packets that were refused by radius, which might explain this error.
Possible?